Privacy Policy

Overview

US STOCK TODAY (hereinafter referred to as "the Company") values the personal information of its users and complies with the Personal Information Protection Act (Korea). This Privacy Policy explains how personal information is collected, used, retained, and destroyed in connection with the services provided by the Company.

1. Categories of Personal Information Collected

The Company collects the following personal information for purposes of membership registration and service provision:

Mandatory Items Collected

• Email address
• Password (stored in encrypted form)
• Nickname

Automatically Collected Items

• Service usage records (date and time of access, features used)
• Cookie information
• Push notification subscription information (browser subscription tokens where consent to receive notifications has been given)
• Language and display preferences (retained in browser storage)

2. Purposes of Collection and Use of Personal Information

The personal information collected is used for the following purposes:

• User Management:Provision of membership-based services, personal identification, confirmation of intent to register, handling of complaints, etc.
• Service Provision:Management of watched stocks and provision of personalized services
• Notifications:Delivery of push notifications for subscribed content and indicators (only where consent has been given)
• Marketing and Advertising:Announcements of new services and provision of event information (only where consent has been given)
• Service Improvement:Compiling service usage statistics and enhancing service quality

3. Retention and Use Period of Personal Information

In principle, the Company destroys personal information without delay once the purpose of its collection and use has been achieved. However, the following information is retained for the periods and on the grounds specified below:

• Upon Membership Withdrawal:Destroyed immediately upon withdrawal (except where retention is required by applicable laws)
• Records Concerning Contracts or Withdrawal of Offers:5 years (Act on Consumer Protection in Electronic Commerce, etc. of Korea)
• Website Visit Records:3 months (Communications Privacy Protection Act of Korea)

4. Provision of Personal Information to Third Parties

In principle, the Company does not disclose users' personal information to external parties. However, the following cases constitute exceptions:

• Where the user has given prior consent
• Where required under the provisions of applicable laws, or where a request is made by an investigative authority in accordance with the procedures and methods prescribed by law for investigative purposes

5. Procedures and Methods of Destruction of Personal Information

The Company destroys personal information without delay when it becomes unnecessary, including upon the expiration of its retention period or upon the achievement of the purpose of processing.

• Electronic Files:Permanently deleted by means that render restoration impossible
• Paper Documents:Shredded by shredder or incinerated

6. User Rights and How to Exercise Them

Users may exercise the following rights at any time:

• Request access to personal information
• Request correction of errors, where any exist
• Request deletion
• Request suspension of processing
• Withdrawal of consent to receive marketing communications

The above rights may be exercised through the in-service settings or by contacting the customer support center.

7. Technical Measures for the Protection of Personal Information

The Company implements the following technical measures to protect personal information:

• Encrypted password storage (bcrypt hashing)
• Data transmission encryption via SSL/TLS
• Secure JWT-based authentication system
• Periodic security inspections

8. Use of Cookies

The Company uses cookies to provide personalized services to users.

• Purpose of Cookies:Maintaining login status and providing service convenience
• Browser Storage:Display settings such as language and theme are stored only in the user's browser and are not transmitted to the server.
• How to Refuse Cookies:Users may refuse the storage of cookies through their browser settings. However, refusing cookie storage may restrict the use of certain services that require login.

9. Push Notifications

Push notifications are sent only where the user has expressly subscribed to them. A subscription token issued by the browser upon subscription is stored and is not used for any purpose other than the delivery of notifications. Users may unsubscribe at any time through the in-service notification settings or browser settings, and the subscription token will be destroyed upon unsubscription.

10. Personal Information Protection Officer

The Company designates the following Personal Information Protection Officer to assume overall responsibility for personal information processing and to handle user complaints and provide remedies in connection with personal information processing.

11. Changes to the Privacy Policy

This Privacy Policy may be supplemented, deleted, or amended in accordance with changes in applicable laws, policies, or security technologies. Upon any change, the Company shall give notice of the changes through the service interface or by other appropriate means.